Zscaler to Acquire Symmetry Systems, Adding Access Graph Technology for AI Agent Security

Zscaler (NASDAQ: ZS) announced intent to acquire Symmetry Systems, a startup specializing in identity mapping and data-access graph technology for AI security. The transaction is expected to close in the coming days.

Symmetry Systems builds an access graph that ingests enterprise-wide access logs from SaaS applications, public cloud services, data stores, and AI systems, then uses AI to correlate them into a map showing which identities — human and non-human — are accessing which data and how. Zscaler plans to layer this visibility into its Zero Trust Exchange platform so security teams can build and enforce policies governing how AI agents communicate with applications, data, and each other.

The AI Agent Governance Problem

Traditional identity governance relies on user directories that organize humans into stable groups with mapped permissions. AI agents break that model: they operate autonomously across systems using ephemeral identities and inherited permissions, and their numbers are growing exponentially. The policies that worked for human users cannot scale to millions of autonomous agents.

Zscaler CEO Jay Chaudhry framed the acquisition around this gap, stating that the access graph provides the foundational visibility the Zero Trust Exchange needs to govern agent-to-application and agent-to-agent communication at scale.

Capabilities Zscaler Highlighted

• Least-privilege policies for AI — map granted versus actual-use permissions across every identity, then enforce minimum necessary access through Zero Trust Exchange
• Full data lineage — trace any data an AI agent touches through chains of sub-agents and tools for audit and compliance
• Real-time anomaly detection — surface unexpected agent behavior and trigger automated Zero Trust Exchange responses
• Blast radius calculation — instantly assess what data and systems are at risk if an agent or identity is compromised

Why Readers Should Care

This acquisition follows the broader pattern of SSE/zero-trust platform vendors absorbing DSPM-adjacent capabilities rather than leaving them to standalone point solutions. Symmetry Systems’ access graph sits at the intersection of DSPM and identity security — precisely the kind of visibility layer that becomes critical as AI agents proliferate across enterprise environments. The deal signals that agent-to-agent and agent-to-data governance is moving from theoretical concern to active platform investment among the largest security vendors.

Competitive Context

Zscaler already offered AI discovery and runtime guardrails; Symmetry fills the identity-to-data mapping gap. This positions Zscaler against other platforms racing to solve agentic AI security, including Palo Alto Networks (recent Protect AI acquisition), CrowdStrike (AI model scanning), and the growing DSPM vendor ecosystem. With DSPM consolidation accelerating — Proofpoint acquiring Normalyze, Veeam reportedly pursuing Securiti AI — Symmetry’s absorption into Zscaler continues the trend of data-security startups finding exits inside larger platform plays rather than scaling independently.